PT-2022-26500 · Google · Android

Published 2022-12-16 · Updated 2023-08-08 · CVE-2022-42544

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android version Android-13

Description The issue is related to improper input validation in the getView method of AddAppNetworksFragment.java, which could mislead users about network add requests. This may lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android version Android-13, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2022-42544

Affected Products

Android

References · 5

• https://osv.dev/vulnerability/CVE-2022-42544 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42544 · Security Note
• https://source.android.com/security/bulletin/pixel/2022-12-01 · Vendor Advisory
• https://t.me/cibsecurity/54706 · Telegram Post
• https://t.me/cvenotify/40386 · Telegram Post